$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50028d0a-c0d1-49d8-b570-64f77c59efed.roa File: 50028d0a-c0d1-49d8-b570-64f77c59efed.roa (raw, json) Hash identifier: 0eMHxrdAieNNNszXI1yPu+YLv3pd2v1Ywltxmv9LzJM= Subject key identifier: 9A:2F:87:AB:0D:84:B2:2F:2E:C5:DB:83:B1:5B:E1:8F:E2:C9:E8:0C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2946BCE250E60703D1C708A8C29761AC7FDA2083 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50028d0a-c0d1-49d8-b570-64f77c59efed.roa Signing time: Sun 31 May 2026 00:00:40 +0000 ROA not before: Sun 31 May 2026 00:00:40 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:46:bc:e2:50:e6:07:03:d1:c7:08:a8:c2:97:61:ac:7f:da:20:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:40 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=d9896806289f8cdc8bb28984b7d93afe0288c473c012e4d1055c023c856831da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:07:e5:b1:73:4e:ee:60:7c:98:1c:ea:a5: e1:e6:a0:88:f0:53:0e:69:df:a1:91:4b:20:ac:a3: 77:49:65:9f:d2:3e:68:69:b8:c3:e4:19:3b:e1:9d: d1:fe:32:ee:6f:70:38:a4:88:45:8f:85:f6:a3:d9: 82:6f:a8:5c:4e:12:d9:63:d2:9e:c9:72:f4:d7:55: 9a:ce:ec:fb:8d:3a:fe:11:a8:53:05:bc:e8:21:d2: ee:4b:80:d0:a5:4c:85:4e:38:f7:54:8c:3a:a9:e7: b0:a2:b8:22:b7:4e:bd:f9:c3:da:bc:f2:7e:b8:a0: 97:fd:c9:33:40:ac:1e:d6:5c:03:fa:a2:81:b4:1c: 88:66:ad:c0:fc:38:33:a1:a0:ee:9f:36:da:10:da: 64:07:e1:cb:3d:0d:79:10:d5:44:dd:e8:53:dc:8d: 0f:89:4c:56:a5:4e:2e:a7:c5:62:94:17:e0:f7:6d: 5a:7b:6f:09:c2:83:e8:ed:92:d1:61:28:29:2e:e2: 51:81:fd:72:3b:a7:e8:14:dc:9f:64:31:64:bb:41: 73:e6:db:a7:19:85:1f:b0:c5:66:49:3a:5c:45:8d: 54:8a:b7:d7:ac:4d:84:f3:14:35:44:ae:67:9a:3f: fe:f9:33:2c:9e:0e:f7:6a:91:72:ac:77:dd:7f:27: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:87:AB:0D:84:B2:2F:2E:C5:DB:83:B1:5B:E1:8F:E2:C9:E8:0C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/50028d0a-c0d1-49d8-b570-64f77c59efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:f080::/48 Signature Algorithm: sha256WithRSAEncryption 4e:6b:ad:3b:0b:70:df:11:83:c2:7c:dd:3f:f8:3d:04:ba:15: b4:6a:25:56:0a:1d:6e:fa:35:36:22:37:8d:e7:f0:39:ef:69: f2:40:48:f4:d8:81:15:90:cf:57:4c:b1:62:b0:2f:fb:9c:79: ab:1e:e4:8f:59:9f:75:5c:4d:2a:49:9d:35:a6:ce:11:9c:ac: 88:3a:8d:2e:a5:3b:e6:44:f3:0d:cb:e2:7b:93:a5:8d:96:4f: d7:92:c3:92:db:1b:2b:54:5e:d2:5d:dd:11:02:fa:45:b9:ff: b6:1a:c4:af:fa:8a:97:78:60:d3:fa:75:43:1c:1c:df:82:ff: 6f:58:4e:f9:30:47:19:d4:07:37:eb:17:f7:b4:ea:65:35:30: bd:68:df:13:fc:90:43:cb:53:17:63:d0:4b:34:8e:4a:33:37: 7e:6d:51:73:c6:13:23:0f:6c:05:2b:61:77:21:73:ba:ea:3b: 5e:9f:ab:9d:25:d2:5c:8c:08:ad:13:0c:2b:35:82:9a:88:0c: c1:48:dd:09:52:39:bb:88:e1:37:b2:cf:0a:e9:6b:5c:55:58: 8f:14:1e:3b:10:bc:af:14:fb:ae:77:34:88:65:4b:99:50:ee: 25:c3:36:ec:90:4c:e9:b6:31:15:38:5a:02:5e:b6:4c:bb:52: 05:33:48:cc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKUa84lDmBwPRxwiowpdhrH/aIIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMDA0MFoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAZDk4OTY4MDYyODlmOGNkYzhiYjI4 OTg0YjdkOTNhZmUwMjg4YzQ3M2MwMTJlNGQxMDU1YzAyM2M4NTY4MzFkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBMH5bFzTu5gfJgc6qXh5qCI8FMO ad+hkUsgrKN3SWWf0j5oabjD5Bk74Z3R/jLub3A4pIhFj4X2o9mCb6hcThLZY9Ke yXL011Wazuz7jTr+EahTBbzoIdLuS4DQpUyFTjj3VIw6qeeworgit069+cPavPJ+ uKCX/ckzQKwe1lwD+qKBtByIZq3A/DgzoaDunzbaENpkB+HLPQ15ENVE3ehT3I0P iUxWpU4up8VilBfg921ae28JwoPo7ZLRYSgpLuJRgf1yO6foFNyfZDFku0Fz5tun GYUfsMVmSTpcRY1UirfXrE2E8xQ1RK5nmj/++TMsng73apFyrHfdfycmawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJovh6sNhLIvLsXbg7Fb4Y/iyegMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUwMDI4ZDBhLWMwZDEtNDlkOC1iNTcwLTY0Zjc3YzU5ZWZlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6fCAMA0GCSqGSIb3DQEBCwUAA4IBAQBOa607C3DfEYPCfN0/ +D0EuhW0aiVWCh1u+jU2IjeN5/A572nyQEj02IEVkM9XTLFisC/7nHmrHuSPWZ91 XE0qSZ01ps4RnKyIOo0upTvmRPMNy+J7k6WNlk/XksOS2xsrVF7SXd0RAvpFuf+2 GsSv+oqXeGDT+nVDHBzfgv9vWE75MEcZ1Ac36xf3tOplNTC9aN8T/JBDy1MXY9BL NI5KMzd+bVFzxhMjD2wFK2F3IXO66jten6udJdJcjAitEwwrNYKaiAzBSN0JUjm7 iOE3ss8K6WtcVViPFB47ELyvFPuudzSIZUuZUO4lwzbskEzptjEVOFoCXrZMu1IF M0jM -----END CERTIFICATE-----Generated at Sat Jun 13 10:26:59 2026 by rpki-client